
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/40f524fa-8246-33ca-bdf9-7b4ce2163043.roa
File: 40f524fa-8246-33ca-bdf9-7b4ce2163043.roa (raw, json)
Hash identifier: OyxlC1B8PoU+7ti2PdD2Z7XqiDCCIb3Ck2l7nIQ/0AA=
Subject key identifier: D6:92:67:FB:F4:26:32:DD:86:29:5F:96:43:CA:EC:4D:13:27:DA:2A
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584D3DFFF157FD10492601560420
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/40f524fa-8246-33ca-bdf9-7b4ce2163043.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 33363
IP address blocks: 2603:9008::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:f1:57:fd:10:49:26:01:56:04:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=5c0e0b3a-e9d5-4d77-a000-26f11481feef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:7e:ca:21:dc:8f:5e:66:87:78:1b:bb:35:
07:d4:9a:5f:e6:d0:a9:c3:1c:20:76:54:35:33:1c:
3c:01:f6:c8:e6:67:1f:03:4b:11:3c:a9:f4:2f:d0:
1b:33:23:d8:58:3e:c5:97:e9:2a:12:8b:00:f6:63:
52:cf:ac:1c:54:f4:e2:ce:ae:2a:e9:b9:72:47:97:
85:07:c3:51:c0:e0:eb:51:bd:39:93:31:aa:8e:69:
af:2b:3b:63:27:50:ac:2f:4b:8e:65:09:3c:f6:f9:
c5:68:c4:3b:a1:76:73:7b:84:a2:a5:5f:9e:0e:dd:
64:19:ae:66:ac:52:ba:ee:6c:bf:5f:b0:f1:80:d4:
f5:d7:64:55:18:f7:8b:58:78:e2:30:b7:ed:97:3c:
bb:01:66:dd:ed:5b:21:15:37:31:d1:68:c6:ee:a0:
4c:99:d9:2b:fa:f5:00:1f:56:61:32:1c:00:b0:63:
1e:09:ee:06:88:e8:35:e4:2d:df:f7:49:f3:ac:30:
1c:d3:a5:f3:ee:b7:52:e1:83:3b:00:dd:ca:9b:92:
b4:99:82:a3:30:ba:98:c6:1a:dd:78:e6:08:7f:d3:
a3:fd:24:a5:66:33:6e:9f:50:84:3c:fd:a6:a2:fc:
3e:1b:1b:6c:1e:fa:77:e3:86:3e:37:1a:1c:38:aa:
e1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:92:67:FB:F4:26:32:DD:86:29:5F:96:43:CA:EC:4D:13:27:DA:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/40f524fa-8246-33ca-bdf9-7b4ce2163043.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:9008::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:14:0c:f6:bf:2a:95:b8:b8:31:fe:59:74:e7:d9:49:e8:4d:
3b:34:bd:1c:be:e4:22:83:b1:63:5d:16:e5:ee:bd:06:56:ad:
f8:a3:c1:07:9b:28:14:07:b5:40:d9:9a:a0:19:dc:91:9f:72:
c3:56:fe:00:05:1a:cc:34:81:23:d7:94:8f:77:ab:ae:09:f2:
b4:7d:e8:29:b0:30:25:3b:7d:08:bb:67:3a:40:6b:44:4b:03:
19:d8:bf:b6:02:cd:5d:96:bb:11:c7:0a:f0:99:65:f5:d6:dd:
8c:02:34:86:70:88:63:57:24:38:73:83:b1:da:9b:0e:e8:91:
87:0b:0b:71:2e:51:03:6e:38:d8:a3:7a:e5:ce:b5:2a:f8:62:
34:bf:b6:cf:90:ab:f3:1c:02:01:48:e0:cb:27:6c:a3:da:48:
a9:98:39:6d:71:c3:77:eb:e1:8e:c6:e1:82:c7:a7:c1:fb:b1:
af:34:da:c9:54:31:4e:08:6a:cb:2f:6c:75:d5:07:64:c6:4e:
e1:f3:89:fb:a4:76:64:bf:ac:5a:00:cd:90:21:1c:b6:e2:7f:
16:4b:f2:80:a6:47:e2:8a:8a:5f:b5:1b:2a:2e:90:69:67:7b:
a3:b9:bf:2e:66:55:5d:98:46:2c:72:69:3b:a3:40:df:3a:8b:
d1:b1:3c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:06:14 2026 by rpki-client